failproofai 0.0.15 → 1.0.0-beta.0

package/.next/standalone/Cargo.lock

@@ -0,0 +1,428 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "autocfg"
+version = "1.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
+
+[[package]]
+name = "bit-set"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08807e080ed7f9d5433fa9b275196cfc35414f66a0c79d864dc51a0d825231a3"
+dependencies = [
+ "bit-vec",
+]
+
+[[package]]
+name = "bit-vec"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e764a1d40d510daf35e07be9eb06e75770908c27d411ee6c92109c9840eaaf7"
+
+[[package]]
+name = "bitflags"
+version = "2.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da"
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys",
+]
+
+[[package]]
+name = "failproofaid"
+version = "1.0.0-beta.0"
+dependencies = [
+ "fpai-ipc",
+ "libc",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "fastrand"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223"
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "fpai-ipc"
+version = "1.0.0-beta.0"
+dependencies = [
+ "libc",
+ "proptest",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi 5.3.0",
+ "wasip2",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi 6.0.0",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "libc"
+version = "0.2.189"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3eaf3ede3fee6db1a4c2ee091bf8a8b4dccdc6d17f656fb07896ee72867612f2"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
+
+[[package]]
+name = "memchr"
+version = "2.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.107"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "proptest"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4b45fcc2344c680f5025fe57779faef368840d0bd1f42f216291f0dc4ace4744"
+dependencies = [
+ "bit-set",
+ "bit-vec",
+ "bitflags",
+ "num-traits",
+ "rand",
+ "rand_chacha",
+ "rand_xorshift",
+ "regex-syntax",
+ "rusty-fork",
+ "tempfile",
+ "unarray",
+]
+
+[[package]]
+name = "quick-error"
+version = "1.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1d01941d82fa2ab50be1e79e6714289dd7cde78eba4c074bc5a4374f650dfe0"
+
+[[package]]
+name = "quote"
+version = "1.0.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "r-efi"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
+
+[[package]]
+name = "rand"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9ef1d0d795eb7d84685bca4f72f3649f064e6641543d3a8c415898726a57b41"
+dependencies = [
+ "rand_chacha",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "rand_xorshift"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "513962919efc330f829edb2535844d1b912b0fbe2ca165d613e4e8788bb05a5a"
+dependencies = [
+ "rand_core",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
+
+[[package]]
+name = "rustix"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
+dependencies = [
+ "bitflags",
+ "errno",
+ "libc",
+ "linux-raw-sys",
+ "windows-sys",
+]
+
+[[package]]
+name = "rusty-fork"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc6bf79ff24e648f6da1f8d1f011e9cac26491b619e6b9280f2b47f1774e6ee2"
+dependencies = [
+ "fnv",
+ "quick-error",
+ "tempfile",
+ "wait-timeout",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.229"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.151"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.119"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "3.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53e9bae58849f64dfa4f5d5ae372c8341f7305f82a3868709269343628b659a3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "tempfile"
+version = "3.27.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
+dependencies = [
+ "fastrand",
+ "getrandom 0.4.3",
+ "once_cell",
+ "rustix",
+ "windows-sys",
+]
+
+[[package]]
+name = "unarray"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eaea85b334db583fe3274d12b4cd1880032beab409c0d774be044d4480ab9a94"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "wait-timeout"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ac3b126d3914f9849036f826e054cbabdc8519970b8998ddaf3b5bd3c65f11"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "wasip2"
+version = "1.0.4+wasi-0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b67efb37e106e55ce722a510d6b5f9c17f083e5fc79afc2badeb12cc313d9487"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "wit-bindgen"
+version = "0.57.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
+
+[[package]]
+name = "zerocopy"
+version = "0.8.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5a105cd7b140f6eeec8acff2ea38135d3cab283ada58540f629fe51e46696eb"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fe976fb70c78cd64cccfe3a6fc142244e8a77b70959b30faf9d0ac37ee228eb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b"

package/.next/standalone/Cargo.toml

@@ -0,0 +1,9 @@
+[workspace]
+resolver = "3"
+members = ["crates/*"]
+
+[workspace.package]
+version = "1.0.0-beta.0"
+edition = "2024"
+license-file = "LICENSE"
+repository = "https://github.com/FailproofAI/failproofai"

package/.next/standalone/crates/PROTOCOL.md

@@ -0,0 +1,122 @@
+# failproofaid wire protocol
+
+The contract between the `failproofai` CLI (thin client) and the `failproofaid`
+daemon over a Unix domain socket. This is the same contract every hook
+invocation already has today — see `src/hooks/handler.ts`'s
+`handleHookEvent`: `(argv --hook <Event> --cli <cli>, stdin JSON payload) ->
+(stdout, stderr, exitCode)`. The daemon adds nothing to that contract; it only
+relays it over a socket instead of a fresh process's argv/stdin/stdout.
+
+Implemented in `crates/fpai-ipc` (framing + envelope + peer verification) and
+`crates/failproofaid` (the socket server itself). As of Stage 2, the daemon
+answers `ping` and rejects `hook` with a stub "not implemented" error — Stage 3
+wires `hook` up to a real warm Node/Bun worker.
+
+## Transport
+
+One Unix domain socket, one connection per request. The daemon reads exactly
+one frame, dispatches it, writes exactly one frame back, and lets the
+connection close — there is no request-ID multiplexing because there is never
+more than one logical request in flight per connection.
+
+Default path: `~/.failproofai/run/failproofaid.sock`. Overridable via the
+`FAILPROOFAI_DAEMON_SOCKET` env var (used by local dev and tests — never point
+this at a directory failproofaid doesn't own itself; see
+`crates/failproofaid/src/paths.rs`'s `ensure_run_dir`, which refuses to modify
+permissions on a pre-existing directory it didn't create).
+
+Permissions: the run directory is `0700` and the socket file `0600` — this is
+the actual access-control boundary (user-scope only, no elevation, same OS
+user only). `crates/fpai-ipc/src/peer.rs`'s `SO_PEERCRED` (Linux) /
+`getpeereid` (macOS) check is defense-in-depth on top of that, not a stronger
+boundary — same-user access can always reach this daemon regardless.
+
+## Framing
+
+Every message, in both directions, is:
+
+```
++----------------------------+------------------------------+
+| length (4 bytes, big-endian u32) | UTF-8 JSON body (length bytes) |
++----------------------------+------------------------------+
+```
+
+A declared length over `MAX_FRAME_LEN` (16 MiB) is rejected without
+allocating a body buffer for it — a hook payload is at most 1 MiB (see
+`handler.ts`'s own stdin cap), so 16 MiB is headroom, not an expected size.
+
+## Envelope
+
+Tagged JSON, `"type"` as the discriminant, camelCase field names.
+
+### Client → daemon (`ClientMessage`)
+
+```jsonc
+// Liveness/handshake check.
+{ "type": "ping", "protocolVersion": 1 }
+
+// One hook evaluation request — one per `failproofai --hook <Event> --cli <cli>` invocation.
+{
+  "type": "hook",
+  "protocolVersion": 1,
+  "hookEvent": "PreToolUse",
+  "cli": "claude",
+  "stdin": "<raw stdin payload the calling agent CLI wrote to the one-shot failproofai process, forwarded verbatim>",
+  "cwd": "/path/to/session/cwd" // optional; see the note below
+}
+```
+
+`cwd` must be the *originating* CLI process's cwd, captured by the thin
+client before dispatch — never the daemon's own cwd. The daemon is a single
+long-lived process; its own `cwd` does not vary per request and must never be
+used to resolve project config or custom policies (this is the "process.cwd()
+hazard" the TS-side plan calls out explicitly).
+
+### Daemon → client (`ServerMessage`)
+
+```jsonc
+{ "type": "pong", "protocolVersion": 1 }
+
+{
+  "type": "hookResult",
+  "protocolVersion": 1,
+  "exitCode": 0,
+  "stdout": "...",
+  "stderr": "..."
+}
+
+// The daemon accepted the connection and parsed the request, but could not
+// produce a verdict (worker down/hung, or — in Stage 2 — hook evaluation
+// simply isn't wired up yet). Distinct from hookResult so the client can
+// tell "ran and decided" apart from "daemon couldn't evaluate at all" — the
+// latter is what drives the client's fail-closed path.
+{ "type": "error", "protocolVersion": 1, "message": "..." }
+```
+
+## Protocol versioning
+
+`protocolVersion` is carried on every message in both directions. A mismatch
+gets an explicit `error` response from the daemon — the client treats *any*
+failure mode (missing socket, refused connection, timeout, malformed
+response, or an explicit version mismatch) identically: fall through to
+whatever the client's fail-closed/in-process policy dictates. There is no
+negotiation, only agree-or-fall-back.
+
+## Peer verification
+
+Every connection is checked with `SO_PEERCRED`/`getpeereid` before a single
+byte of the request is read. A peer running as a different OS user gets the
+connection dropped with **no response at all** — not even an `error` frame —
+so a connection from the wrong user can't even confirm a daemon is listening
+there.
+
+## Malformed input handling
+
+- A frame whose declared length exceeds `MAX_FRAME_LEN`: connection closed,
+  no response, no allocation attempted for the declared size.
+- A syntactically invalid or truncated frame: connection closed, no response.
+- A well-formed frame with an unrecognized `"type"`: fails to deserialize,
+  same as above.
+
+None of these crash the daemon or the connection-handling thread — a bad
+frame from one connection has no effect on any other connection.

package/.next/standalone/crates/failproofaid/Cargo.toml

@@ -0,0 +1,18 @@
+[package]
+name = "failproofaid"
+version.workspace = true
+edition.workspace = true
+license-file.workspace = true
+repository.workspace = true
+description = "Thin Rust supervisor: owns the failproofai IPC socket, service lifecycle, and warm worker process supervision. Carries no policy logic."
+publish = false
+
+[[bin]]
+name = "failproofaid"
+path = "src/main.rs"
+
+[dependencies]
+fpai-ipc = { path = "../fpai-ipc" }
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+libc = "0.2"

package/.next/standalone/crates/failproofaid/src/lock.rs

@@ -0,0 +1,81 @@
+//! Single-instance guard: at most one `failproofaid` per OS user.
+//!
+//! Uses an advisory `flock()` on a dedicated lock file rather than a
+//! PID file — a PID file has to be checked-then-trusted (the PID could
+//! have been reused by an unrelated process since), whereas `flock` is
+//! released automatically by the kernel when the holding process exits or
+//! is killed, for any reason, with no stale-file cleanup required.
+
+use std::fs::{File, OpenOptions};
+use std::io;
+use std::os::unix::io::AsRawFd;
+use std::path::Path;
+
+pub struct SingletonLock {
+    // Held for the guard's lifetime; the flock is released when this File
+    // (and its underlying fd) is dropped.
+    _file: File,
+}
+
+#[derive(Debug)]
+pub enum LockError {
+    Io(io::Error),
+    AlreadyRunning,
+}
+
+impl std::fmt::Display for LockError {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        match self {
+            LockError::Io(e) => write!(f, "io error acquiring daemon lock: {e}"),
+            LockError::AlreadyRunning => {
+                write!(f, "another failproofaid is already running for this user")
+            }
+        }
+    }
+}
+
+impl std::error::Error for LockError {}
+
+/// Tries to acquire the singleton lock at `path`, creating the file if
+/// needed. Returns [`LockError::AlreadyRunning`] immediately (non-blocking)
+/// if another live process already holds it.
+pub fn acquire(path: &Path) -> Result<SingletonLock, LockError> {
+    let file = OpenOptions::new()
+        .create(true)
+        .truncate(false)
+        .write(true)
+        .open(path)
+        .map_err(LockError::Io)?;
+
+    let ret = unsafe { libc::flock(file.as_raw_fd(), libc::LOCK_EX | libc::LOCK_NB) };
+    if ret != 0 {
+        let err = io::Error::last_os_error();
+        return match err.raw_os_error() {
+            Some(libc::EWOULDBLOCK) => Err(LockError::AlreadyRunning),
+            _ => Err(LockError::Io(err)),
+        };
+    }
+    Ok(SingletonLock { _file: file })
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn a_second_acquire_in_the_same_process_fails_while_the_first_is_held() {
+        let tmp = std::env::temp_dir().join(format!(
+            "failproofaid-lock-test-{}-{}",
+            std::process::id(),
+            line!()
+        ));
+        let first = acquire(&tmp).expect("first acquire should succeed");
+        let second = acquire(&tmp);
+        assert!(matches!(second, Err(LockError::AlreadyRunning)));
+        drop(first);
+        // Once released, a fresh acquire succeeds again.
+        let third = acquire(&tmp);
+        assert!(third.is_ok());
+        std::fs::remove_file(&tmp).ok();
+    }
+}